Build a valid SPF TXT record. Select your email providers, add custom includes and IP ranges, then copy the record into your DNS.
yourdomain.com. 3600 IN TXT "v=spf1 ~all"
SPF (Sender Policy Framework) tells receiving mail servers which IP addresses and mail services are authorized to send email for your domain. It is published as a DNS TXT record at your domain root. An SPF record that ends with -all rejects all mail from unlisted senders; ~all marks it as suspicious but still delivers it.
RFC 7208 limits SPF to 10 DNS-resolution mechanisms per lookup. Each include: counts as one lookup, but many providers have nested includes that expand further. If you exceed 10 lookups, SPF returns PermerFail and all messages appear unauthenticated. Use the SPF Analyzer to check an existing record's full resolution chain.